Voxel Custom firmware build for R9000/R8900 v. 1.0.4.64HF

[Voxel]

Continuation of:

https://www.snbforums.com/threads/custom-firmware-build-for-r9000.40125/
. . .
https://www.snbforums.com/threads/custom-firmware-build-for-r9000-r8900-v-1-0-4-62hf.79866/
https://www.snbforums.com/threads/custom-firmware-build-for-r9000-r8900-v-1-0-4-63hf.80444/

New version of my custom firmware build: 1.0.4.64HF.

Changes (vs 1.0.4.63HF):

1. Toolchain: Go is upgraded 1.18.5->1.18.7.
2. Toolchain: GDB is upgraded 11.2->12.1.
3. zlib: add patch to fix CVE-2022-37434.

https://nvd.nist.gov/vuln/detail/CVE-2022-37434​

(score 9.8, Critical)​

4. expat package is upgraded 2.4.8->2.5.0 (fixing CVE-2022-40674, CVE-2022-43680).

https://nvd.nist.gov/vuln/detail/CVE-2022-40674​

(score 9.8, Critical)​

https://nvd.nist.gov/vuln/detail/CVE-2022-43680​

(score 7.5, High)​

5. OpenSSL 1.0.2u: add patches to fix CVE-2020-1971/CVE-2021-23841/CVE-2021-3712/CVE-2022-0778:

https://nvd.nist.gov/vuln/detail/CVE-2020-1971​

(score 5.9, Medium)​

https://nvd.nist.gov/vuln/detail/CVE-2021-23841​

(score 5.9, Medium)​

https://nvd.nist.gov/vuln/detail/CVE-2021-3712​

(score 7.4, High)​

https://nvd.nist.gov/vuln/detail/CVE-2022-0778​

(score 7.5, High)​

6. unbound package (used in stubby) is upgraded 1.16.2->1.17.0 (fixing CVE-2022-3204).

https://nvd.nist.gov/vuln/detail/CVE-2022-3204​

(score 7.5, High)​

7. libxml2 package is upgraded 2.10.0->2.10.3 (fixing CVE-2022-40303, CVE-2022-40304).

https://access.redhat.com/security/cve/cve-2022-40303​

(score 8.2, High)​

https://access.redhat.com/security/cve/cve-2022-40304​

(score 8.2, High)​

8. stubby package is upgraded 0.4.0->0.4.2.
9. curl package is upgraded 7.84.0->7.86.0.
10. ethtool package is upgraded 5.18->6.0.
11. libflac package is upgraded 1.3.4->1.4.2.
12. ffmpeg package is upgraded 4.3.4->4.3.5.
13. minidlna package is upgraded 1.3.1->1.3.2.
14. libnl-tiny package is upgraded 2022-05-17->2022-05-23.
15. libubox package is upgraded 2022-05-15->2022-09-27.
16. libgpg-error package is upgraded 1.45->1.46.
17. popt package is upgraded 1.18->1.19.
18. libreadline package is upgraded 8.1.2->8.2.
19. gettext package is upgraded 0.21->0.21.1.
20. iperf3 package is upgraded 3.11->3.12.
21. Host tools: upgrade xz to 5.2.7.
22. Host tools: upgrade mkimage/u-boot to 2022.10

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[foo man]

Thanks for your continued support Voxel, much appreciated. Installed and running fine here, as always.

 

[xTe22-pT]

Same here. Installed and tested. No issues found so far. Never missed an update since the first version. Keep up the great job !